Cookie notice

We set one cookie, and it is the one that keeps you signed in. We set no analytics cookies, no advertising cookies and no tracking cookies. We do not use pixels, fingerprinting, session recording or cross-site tracking of any kind, and we store nothing else in your browser — no local storage, no session storage.

That is why you have never seen a cookie banner on this site. A banner exists to ask permission for storage that is not strictly necessary. We have none, so there is nothing to ask you for, and a banner that asked anyway would be pretending.

If you are signed out, we set no cookies at all. You can read every page of this website, including this one, without anything being stored in your browser.

On a secure connection the cookie is named __Secure-bling.session_token, which is a browser-enforced marker meaning it may only ever be sent over HTTPS. It is also marked HttpOnly, so no JavaScript on the page — ours or an attacker’s — can read it, and SameSite=Lax, so it is not sent when another website makes a request to ours.

Why the name does not match the brand

The prefix bling is an internal identifier that predates this product’s current name. Renaming it would invalidate every session cookie in existence and sign everyone out for no benefit whatsoever, so we kept it. It has no effect on what the cookie does or what is in it. We are telling you the name the browser will actually show you, because a cookie notice that lists a name you cannot find is useless.

Named explicitly, because “we only use essential cookies” is a sentence a lot of sites write while doing the opposite:

• No analytics. No Google Analytics, no product-analytics cookie, no first-party analytics identifier.
• No advertising or retargeting. No advertising network cookie, no conversion pixel, no audience tag. We do not advertise to you off this site using data collected on it.
• No social media buttons. Those load third-party code and set third-party cookies as a side effect. There are none on this site.
• No A/B testing, heat-mapping or session-replay tools.
• No preference cookie. Your settings live in your account on our servers, not in your browser, so they follow you between devices.
• No local or session storage, and no cookies written by JavaScript.

We do measure how the product is used, so that we can fix what is broken. We do it from our own server-side records — which pages were served, which requests failed — and those records are covered by our privacy notice rather than by this one, because they do not involve storing anything on your device.

There is exactly one page where code from another company runs in your browser: the credit-pack checkout. To offer the payment buttons, we load the payment provider’s script from their own servers, and their payment flow runs inside a frame that belongs to them.

The payment provider will set its own cookies, under its own domain, to run and secure the payment — typically to keep you logged in to them, to remember the state of the payment and to detect fraud. Those cookies are theirs, not ours: we cannot read them, we cannot control them, and they are governed by that company’s own cookie and privacy notices, which are linked from the payment window. Our privacy notice names the payment provider in its list of suppliers.

Nothing else on this site loads code from anyone else. Our fonts are served from our own domain rather than from a font network, precisely so that reading a page does not tell a third party you were here.

You are in control of what your browser stores. Every major browser lets you see the cookies a site has set, delete them, and block them.

• To see or delete ours: open your browser’s settings, find the cookie or site-data section, and look for theblingmarketing.com.
• If you delete the session cookie while signed in, you will be signed out. Nothing else happens, and nothing is lost — sign in again and everything is where you left it.
• If you block cookies for this site entirely, you can still read every public page, but you will not be able to sign in at all. The sign-in process has no way to remember you without it.

“Do Not Track” and “Global Privacy Control” signals ask a site not to track you across the web. We do not track you across the web in the first place, so there is nothing for the signal to change.

If we ever add a cookie, this page changes first. If we add one that is not strictly necessary — an analytics cookie, for example — we will ask your permission before setting it, with a real choice and a way to change your mind, because that is what the law requires and because a pre-ticked box is not consent.

This notice carries a version and a date at the top of the page, shared with our privacy notice, so you can see when it last changed.

Questions about cookies or anything else to do with your data: [email protected]. You do not need an account to write to us.